Get Instant Access of 100% REAL PSE-Cortex DUMP Pass Your Exam Easily
PSE-Cortex Free Exam Questions with Quality Guaranteed
NEW QUESTION # 31
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 10 TB
- B. 1 TB
- C. 100 GB
- D. 10 GB
Answer: C
NEW QUESTION # 32
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified scnpt was run in the wrong Docker image
- B. The modified script attempted to access a dictionary key that did not exist in the dictionary named "data"
- C. The modified script required a different parameter to run successfully.
- D. The dictionary was defined incorrectly in the second script.
Answer: A
NEW QUESTION # 33
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
NEW QUESTION # 34
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
NEW QUESTION # 35
What method does the Traps agent use to identify malware during a scheduled scan?
- A. Heuristic analysis
- B. Signature comparison
- C. Local analysis
- D. WildFire hash comparison and dynamic analysis
Answer: D
NEW QUESTION # 36
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Agree to build the integration as part of the POC
- B. Tell them we can build it with Professional Services.
- C. Tell them custom integrations are not created as part of the POC
- D. Extend the POC window to allow the solution architects to build it
Answer: C
NEW QUESTION # 37
Which option is required to prepare the VDI Golden Image?
- A. Install the Cortex XOR Agent on the local machine
- B. Run the Cortex VDI conversion tool
- C. Configure the Golden Image as a persistent VDI
- D. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
Answer: D
NEW QUESTION # 38
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
- B. Contact support and ask for a security exception.
- C. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- D. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
Answer: B
NEW QUESTION # 39
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. !*
- B. =>
- C. not Contains
- D. < >
Answer: A,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
NEW QUESTION # 40
If you have a playbook task that errors out. where could you see the output of the task?
- A. Playbook Editor
- B. /var/log/messages
- C. Demisto Audit log
- D. War Room of the incident
Answer: D
NEW QUESTION # 41
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. cc.xnet50traps.paloaltonetworks.com
- B. ch-xnet.traps.paloaltonetworks.com
- C. cc-xnet50.traps.paloaltonetworks.com
- D. xnettraps.paloaltonetworks.com
- E. hc-xnet50.traps.paloaltonetworks.com
- F. cc-xnet.traps.paloaltonetworks.com
Answer: B,C,F
NEW QUESTION # 42
What is the retention requirement for Cortex Data Lake sizing?
- A. logs per second
- B. number of VM-Series NGFW
- C. number of days
- D. number of endpoints
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
NEW QUESTION # 43
What is the difference between an exception and an exclusion?
- A. An exception is based on rules and exclusions are on alerts
- B. An exclusion does not exist
- C. An exception does not exist
- D. An exclusion is based on rules and exceptions are based on alerts.
Answer: A
NEW QUESTION # 44
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for automation scripts
- B. A group of engines that use an algorithm to efficiently share the workload for integrations
- C. A group of D2 agents that share processing power across multiple endpoints
- D. A group of engines that ensure High Availability of Demisto backend databases.
Answer: A
NEW QUESTION # 45
Which two formats are supported by Whitelist? (Choose two)
- A. CSV
- B. CIDR
- C. Regex
- D. STIX
Answer: A,B
NEW QUESTION # 46
What is the result of creating an exception from an exploit security event?
- A. White lists the process from Wild Fire analysis
- B. exempts administrators from generating alerts for 24 hours
- C. disables the triggered EPM for the host and process involve
- D. exempts the user from generating events for 24 hours
Answer: C
NEW QUESTION # 47
......
PSE-Cortex Free Exam Files Downloaded Instantly: https://www.passtorrent.com/PSE-Cortex-latest-torrent.html
Practice Exams and Training Solutions for Certifications: https://drive.google.com/open?id=1iEJrXnDvpzxeMpGuskpZ_HAFJFxEQHbl